Update legal docs

docs/code-of-conduct/staff.md

+# Staff Code of Conduct
+
+```{admonition} This policy is currently a working draft.
+:class: warning
+
+We're actively editing this page on its development branch on GitLab, so
+please treat this as interim policy while working to finalize it in near
+future.
+```
+
+As a community maintainer or squad member, you should be a example of not only following our
+community code of conduct, but also.
+
+## Using a `crew.recaptime.eu.org` address
+
+Your use of your `crew.recaptime.eu.org` address (as well as its Staff SSO account through Microsoft 365) is governed by our [SSO ToS][sso-tos].
+
+[sso-tos]: https://docs.google.com/document/d/14Gnk2EyTEU95dDGu_iozxuw6cKBhX0MQ7HmanvOnY1U/edit?usp=sharing
+
+## Harassment, Bullying and Discrimination
+
+Any violations relating to harassment, bullying and discrimination against and/or
+relating to protected classes (as defined in the community code of conduct) by
+a staff member will impose heavy sanctions compared to regular community members.
+

docs/index.md

@@ -37,5 +37,6 @@ cla/index
 :hidden:
 
 code-of-conduct/index
+code-of-conduct/staff
 mod-policies/index
 ```

docs/mod-policies/coc-enforcement.md

@@ -11,6 +11,13 @@ We follow the general advice on the version of Contributor Convenant our current
 conduct were adopted, alongside Mozilla's diversity and inclusion guidelines, with some
 adjustments specific to our community and internal spaces.
 
+## Scope
+
+Any activity performed using a `@crew.recaptime.eu.org` email address must follow the
+Code of Conduct as published for kernel.org, just as any individual using a corporate
+email account must follow the specific rules of that corporation. Additional policies
+may apply, including the
+
 ## Application of [Consequence Ladder]
 
 [Consequence Ladder]: https://github.com/mozilla/inclusion/blob/master/code-of-conduct-enforcement/consequence-ladder.md
@@ -31,7 +38,7 @@ If this is their first formal warning, evaluate their access to internal/sensiti
 within Recap Time Squad and consider temporarily revoking their NDA access[^1].
 
 [^1]: The coverage of a regular NDA within Recap Time Squad are mostly PII data (per privacy laws
-globally)
+globally) and internal projects.
 
 ### Mandatory Cool-off Period